Security of community builds? - Yes, they are tested before from Murena

I like /e/os very much, but do Murena ensure/check if there are any backdoors etc. in the community builds?

Thank you


Edit:

Yes they are tested, thanks to @AnotherElk and @tcecyk for the explanation!

Sorry for opening the thread!

The linked documents from @tcecyk @AnotherElk are explaining it perfect!

“Community

  • Builds are made by /e/OS using the /e/OS build infrastructure and signed by /e/OS dev keys

  • Includes the latest /e/OS development code for the device

  • Is released after testing but may still contain non critical bugs

  • Get regular OTA updates

  • Available for download on /e/OS websites

  • Release Frequency: Monthly if possible

  • Earlier referred to as dev builds

  • Build Naming format:

    • builds on Android 14 and startjng from v2.8 : IMG-e-2.8-a14-20250221470208-community-FP4.zip

    • builds on Android 14 and previous OS version with /e/OS version below v2.8 :IMG-e-2.7-u-20250110460550-community-FP4.zip"

So thank you very much again

1 Like

Current “community” builds were “dev” builds previously, and all built by murena, not the community. Thus your trust could be equated between official builds and communiy. (There’s also a new aspect to them as documented here “Community builds dropped for these devices”)

What you might have in mind is unofficial builds that really are built by regular forum participants? in those you’d need to trust the publishing user.

1 Like

Also explained here … https://doc.e.foundation/build-status

2 Likes

Thank you very much!

Thank you very much too!

The security of the Official-Community builds, despite the fact of encryption with keys signs or certifications (SHA2*), only guarantee the protection somehow of directories with superuser permission, but do not “safe” devices from basic attacks. There is not secure devices though.

1 Like

Thank you.

I know, that there is no 100% security against attacks.

But I like the look and feel of e/os and the degoogled core.

So thanks to everyone developing /e/os and lineageos etc.

This topic was automatically closed after 2 days. New replies are no longer allowed.